Privacy Policy
Your privacy is fundamental to everything we do. Learn how we protect your personal health information and respect your data rights.
This privacy policy applies to CareEcho's beta testing phase. Policies may be updated before public release.
Table of Contents
1. Company Information
Data Controller
MG Consultant LLC is the data controller responsible for your personal information collected through CareEcho.
Contact Information
Company: MG Consultant LLC
Website: www.careecho.online
Privacy Contact: privacy@careecho.online
General Contact: contact@careecho.online
2. Information We Collect
Account Information
- Email address and password
- Full name and profile information
- Account preferences and settings
Health & Conversation Data
- Voice recordings and audio data from conversations
- Conversation transcripts and summaries
- Health-related information you choose to share
- Emotional analysis data from voice interactions
- Usage patterns and interaction history
Technical Information
- Device information and browser type
- IP address and location data (if permitted)
- Usage analytics and performance metrics
- Error logs and diagnostic information
Privacy-First Approach
We collect only the minimum information necessary to provide CareEcho's services. You have full control over what health information you choose to share.
3. How We Use Your Information
Service Provision
- Provide AI-powered health conversations and support
- Generate personalized health insights and recommendations
- Maintain conversation history and continuity
- Improve voice recognition and emotional analysis
Platform Improvement
- Analyze usage patterns to enhance user experience
- Develop and improve AI models and algorithms
- Identify and fix technical issues
- Conduct research for healthcare innovation
Communication
- Send important service updates and notifications
- Provide customer support and assistance
- Share beta testing updates and feedback requests
- Respond to your inquiries and requests
Legal & Safety
- Comply with applicable laws and regulations
- Protect against fraud and security threats
- Enforce our terms of service and policies
- Respond to legal requests and court orders
4. Data Sharing & Disclosure
No Data Selling
We never sell, rent, or trade your personal information to third parties for marketing purposes.
Service Providers
We may share limited data with trusted service providers who help us operate CareEcho:
- Cloud hosting and infrastructure providers (Vercel, Supabase)
- AI and voice processing services (Hume AI)
- Analytics and performance monitoring tools
- Customer support and communication platforms
Legal Requirements
We may disclose your information when required by law, such as in response to court orders, legal processes, or to protect the rights and safety of our users.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, subject to the same privacy protections.
5. Data Security
Security Measures
- End-to-end encryption for all data transmission
- Encrypted storage of all personal and health information
- Regular security audits and vulnerability assessments
- Access controls and authentication requirements
- Secure cloud infrastructure with enterprise-grade protection
Data Retention
We retain your information only as long as necessary to provide our services and comply with legal obligations. You can request deletion of your data at any time.
Incident Response
In the unlikely event of a data breach, we will notify affected users and relevant authorities within 72 hours, as required by applicable privacy laws.
6. Your Privacy Rights
You have the following rights regarding your personal information:
Access & Portability
- Request a copy of your data
- Export your conversation history
- Download your account information
Control & Correction
- Update or correct your information
- Modify privacy preferences
- Control data sharing settings
Deletion & Restriction
- Delete your account and data
- Restrict processing of your data
- Object to certain uses
Consent & Withdrawal
- Withdraw consent at any time
- Opt out of communications
- Disable data collection features
Exercise Your Rights: Contact us at privacy@careecho.online to exercise any of these rights. We'll respond within 30 days.
7. Health Information Protection
Not a Medical Device
CareEcho is not a medical device and should not be used for medical emergencies or as a substitute for professional medical advice.
Health Data Handling
- All health information is encrypted and stored securely
- Access is limited to authorized personnel only
- Health data is never used for advertising or marketing
- We comply with applicable health privacy regulations
Your Control
- You choose what health information to share
- You can delete health conversations at any time
- You can opt out of health data analysis features
- You maintain ownership of your health information
8. Beta Testing Considerations
Beta Status: CareEcho is currently in beta testing. This means features may change, and additional data collection may occur for testing purposes.
Beta-Specific Data Use
- Enhanced logging for debugging and improvement
- User feedback and testing data collection
- Performance monitoring and error tracking
- Feature usage analytics for development
Confidentiality Requirements
- Do not share screenshots or recordings publicly
- Do not discuss detailed features without written consent
- Report bugs and issues through official channels only
- Respect the confidential nature of beta testing
10. International Users
Data Transfers
Your information may be processed and stored in countries other than your own. We ensure appropriate safeguards are in place for international data transfers.
Regional Compliance
- GDPR (EU): Full compliance with European data protection laws
- CCPA (California): California Consumer Privacy Act protections
- PIPEDA (Canada): Personal Information Protection compliance
- Other Jurisdictions: Adherence to local privacy requirements
11. Children's Privacy
Age Restriction
CareEcho is not intended for children under 18 years of age. We do not knowingly collect personal information from minors.
If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe we have collected information from a minor, please contact us immediately.
12. Policy Changes
We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements.
Notification of Changes
- Email notification for significant changes
- In-app notifications for policy updates
- Updated "Last Modified" date on this page
- 30-day notice period for material changes
Your continued use of CareEcho after policy changes constitutes acceptance of the updated terms. If you disagree with changes, you may delete your account.
13. Contact Information
If you have questions about this privacy policy or our data practices, please contact us:
Privacy Inquiries
Email: privacy@careecho.online
Response Time: Within 30 days
General Contact
Email: contact@careecho.online
Website: www.careecho.online
Data Protection Officer: For EU residents, you may contact our Data Protection Officer at dpo@careecho.online
Questions or Concerns? We're here to help with any privacy-related questions.